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Abstract. Moufang loops are one of the best-known generalizations of groups. 
There is only one countable family of nonassociative finite simple Moufang loops, 
arising from the split octonion algebras. We prove that every member of this 
family is generated by three elements, using the classical results on generators 
of unimodular groups. 
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1. Finite Simple Moufang Loops 

A Moufang loop is a loop satisfying the identity x{y{xz)) = {{xy)x)z. Every 
element a; of a Moufang loop has a (unique) two-sided inverse x~^; every two 
elements generate a group. Loops with the latter property are called diassociative 



10|. The best-known Moufang loop is the multiplicative loop of nonzero elements 
in the standard 8-dimensional real octonion algebra O. Surely the best-known 
^zie Moufang loop is the 240-element loop L of integral octonions of norm one 

In 1956, L. Paige [9| found one nonassociative finite simple Moufang loop for 
every finite field. Following E. Bannai and S. Song [3|, we denote this Paige loop 
constructed over F = GF{q) by M*{q). Let us give the most brief description of 
M*{q) now. 

Consider the Zorn multiplication 

a a\ f c j\ _ f ac + a ■ 6 O'-y + ad — l3 x 6^ 
13 hj \5 dj ~ \l3c + h5 + ay.-f f3 ■ + bd 

where a, b, c, d E F, a, 7, 5 G F^, and where a ■ 6 (resp. a x 6) denotes the 
dot product (resp. cross product) of a and 6. This is the same formula M. Zorn 
used to construct the split octonion algebra over F. The loop M*{q) consists of 
all matrices 

a a 



(1) 



with det M = ab — afi = 1 that are multiplied according to ([T]), and where M and 
—M are identified. The neutral element of M*{q) is the identity matrix /, and 
the inverse of M is 

b —a' 
-(3 
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In 1987, M. Liebeck [Sj proved that there are no other nonassociative finite 
simple Moufang loops. The loop M*(2) is exceptional in the sense that it shows 
up in the real algebra O, too. Namely, M*(2) is isomorphic to the quotient of L 
by its center Z{L) = {1, —1} (see j3| once again). 

Associative finite simple Moufang loops are finite simple groups. It is a remark- 
able fact that every finite simple group is 2-generated |2|]; even more so, since no 
proof using only the simplicity is known. Instead, every family of finite simple 
groups must be investigated separately. Because of diassociativity, the nonasso- 
ciative Paige loops cannot be 2-generated. It is reasonable to expect that a small 
number of generators will do. Indeed, it this paper we prove that: 

Theorem 1.1. Every nonassociative finite simple Moufang loop is 3-generated. 

Note that Theorem II. II was proved in [11] for all Paige loops M*{p), p a prime. 
Thus the main task of this paper is to cover the general case. We also present a 
simple proof for the prime case, and offer at least two generating sets for every 
M*(g). The reader who wants to establish 11.11 as quickly as possible should focus 
on 12. 2^ 12. 3^ and Section O 

2. Generators for L2{q) 

The crucial observation concerning Paige loops is that M*{q) contains several 
copies of L2{q) = PSL2{q). Given the canonical basis Ci = (1, 0, 0), 62 = (0, 1, 0), 
63 = (0, 0, 1) of F3, let (pi : L2{q) — > M*{q) be defined by 

I fa b\ _ f a 6eA 
d) ~ \cei d J ' 

and let Gi be the image of ^2(5) under (p^. Since the multiplication in Gi coincides 
with the usual matrix multiplication (all cross products involved in ([T]) vanish), 0j 
is an isomorphism L2{q) — > Gi. 

This brings our attention to the classical results concerning generators for L2{q) 
and SL2{q). First of all, we have the Dickson Theorem: 

Theorem 2.1 (L. E. Dickson, 1900). If q ^ 9 is an odd prime power or q = 2, 
then SL2{q) is generated by 

(^) (; > (1 ;) ^ 

where X is a primitive element of GF{q). 

The proof can be found in [6|, and more recently in 0, pp. 44-55]. The statement 
of the theorem usually does not mention q = 2, although it is apparently true for 
q = 2, since SL2{2) = S3 is generated by any two involutions, in particular by ([2]). 

A. A. Albert and J. Thompson proved [l|. Lemma 8] that for any primitive 
element A of GF{q), q > 2, the group SL2{q) is generated by B, —B, and C, 
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where 

We therefore have: 

Proposition 2.2 (A. A. Albert, J. Thompson, 1959). Let q > 2 be a prime power. 
Then L2{q) is generated by (0), where X is a primitive element of GF{q). 

The generators are especially convenient for our purposes, because (f)i{B) = 
B for every i, I < i < 3; but let us not get ahead of ourselves. It is practical to 
know some generators that do not involve a primitive element. For that matter, 
Coxeter and Moser argue in [sl that 

Lemma 2.3. For every prime p, the group L2{p) is generated by 

w (1 ?) . {\ J) ^ 

3. Generators for M*{q) 

Our first result concerning M*{q) has nothing to do with the generators for L2{q). 
In its proof, we take advantage of the following lemma due to Paige: 

Lemma 3.1 (L. Paige, 1956). M*{q) is generated by 

(5) ^^^=G 

where [3 runs over all nonzero vectors in . 

Proof. Combine Lemmas 4.2 and 4.3 of [9|. □ 
Proposition 3.2. M*{q) is generated by Gi U 6*2 U 6*3. 

Proof. Let Q be the sub loop of M*(g) generated by Gi U 6*2 U 6*3. Thanks to 
Lemma 13.11 it suffices to prove that Q contains all elements Afg, Af^, defined in 
([5]). We show simultaneously that M/3 G Q and M'^ G Q. 

Let k denote the number of nonzero entries of j3. There is nothing to prove 
when k <1. Suppose that k = 2. Without loss of generality, let = (a, b, 0) for 
some a, b e F* = F\{0}. Verify that 

(1 aei\fl be2\ ( I A (a,6,0)\ 

\Q I )\Q I )' \-abe:i V ^ / ' 

and thus that Mp G Q. Similarly, G Q. We can therefore assume that Q 
contains all elements Mp, M'^ with k < 2. 

Let /c = 3, /3 = (a, b, c) for some a, b, c E F*. As 

fl (a,6,0)\A (0,0, c)\ / 1 A {a,b,c)\ 

[0 1 / 1 / \i-bc,ac,0) 1) [0 1 J' 

Mp belongs to Q. Symmetrically, M'^ G Q, and we are done. □ 
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In fact, Gi U G2 already generates M*{q). The role of the cross product is 
especially apparent in the next Proposition. 

Proposition 3.3. The subgroup G3 is contained in the subloop of M*{q) generated 
by Gi U 6*2- In particular, M*{q) is generated by GiU G2. 

Proof. As it turns out, all we need are these two equations: 

1 0\ ^ _ / e2\ f 1 XeA (I e2\( 1 Aei 
1) \-e2 0)\-X-'ei ) ' [-62 ) [-X-'e^ 

^ / eA / -62 

-63 J \-ei J \e2 

Note that the left hand sides of these equations are elements of G3, whereas the 
right hand sides are products of elements of Gi U G2- When g = 2, we are done 
by Lemma [2 .Si When q > 2, observe that 



1 W 1 \ _ ( 1 
A 1 J l-l oj ~ l-l A 



C. 



Since B = (t)i{B) for every i, 1 < « < 3, we are done by Proposition 12.21 □ 

Theorem 11.11 is now proved. When q > 2, M*{q) is generated by 0i(C), (p2{C) 
and B = 4'i{B) = 4>2{B), by Propositio ns | 2.2I and 13.31 When g = 2, we are done 
by the main result of [111], Theorem 2.1 H 



For the sake of completeness, allow us to present an alternative, simpler proof 
of [m. Theorem 2.1]. 



Proposition 3.4. |lll . Theorem 2.1] Let p be a prime. Then M*{p) is generated 
by 



^0 1 y ' ^ \o 1 J ' \-e3 1 

Proof. First check that 

0^(°.;)(;;r(°:r' 

Combine (jl]) and to see that L2{p) is generated by 

Consequently, M*{p) is generated by Ui = U2 = 4>2{U), V\ = (/^liV), and 

V2 = MV)- Now, 

V2 = -{XUi-XU2)-X-^U^, 
Vx = -UiU2-{V2-UiX), 
and we are through. □ 
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4. More Generating Sets 

We would like to show how to obtain additional generating sets for M*{q). We take 
advantage of Proposition [373| Dickson's Theorem, and of the fact that SL2{2^) (for 
r > 1) is generated by 

(7) = L J , ' 



1 oy ' \o ' ' 

where A is a primitive element of GF{2^). We leave the verification of ([7]) to the 
reader. 

Since 4>i{D2) = D2 for z = 1, 2, 3, we immediately see from Proposition 13.31 that 
M*(2'') (for r > 1) is generated by 0i(/^i), 02(^i) and D2. 

Proposition 4.1. Let q ^ he an odd prime power or q = 2. Then M*{q) is 
generated by 

1 ei\ ( 1 62 \ / Aea 



where X is a primitive element of GF{q). 

Proof. Keeping Proposition 13.31 and Dickson's Theorem in mind, we only need to 
obtain the elements 

' 1 0^ 

for i = 1, 2. Straightforward computation reveals that 

1 0\ _ _f AegV fl e2\ ( Aeg 
Aei l) V-A-^es I ) \Q I ) l^-A-^es 1 

1 OV' _ _/ AesV A ei\ ( Aeg 
Ae2 l) V-^^'es I ) \Q 1) \-X-'e, 1 

Note that the expressions on the right hand side can be evaluated in any order. □ 
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